APIM - Can't make validate client certificate policy work for custom CA

Raphael Silva 0 Reputation points
2025-04-03T18:01:45.9566667+00:00

Hello,

I'm trying to implement a validate client certificate policy for one of the operations in my API inside azure API management, but I cannot make it work. I have uploaded in my instance the Custom CA chain and my policy looks like that:

    <inbound>
        <!-- Valida o certificado apresentado pelo Itaú -->
        <validate-client-certificate validate-revocation="true" validate-trust="true" validate-not-before="true" validate-not-after="true" ignore-error="false" />
    </inbound>

I can see in the analytics the requests from the external client coming but it doesn't work and no status code is logged, as shown in the image attached.

How can I activate better logs? To understand what's happening

Microsoft Identity Manager
Microsoft Identity Manager
A family of Microsoft products that manage a user's digital identity using identity synchronization, certificate management, and user provisioning.
834 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.